Li-drive

ABSTRACT

An optical communication access point comprises: an optical communication channel for allowing wireless light communication with a remote device, and a memory for storing content, wherein the content in the memory is accessible by the remote device via the wireless light communication link.

RELATED APPLICATIONS

The present application is a continuation of U.S. patent applicationSer. No. 16/082,001, filed on Sep. 4, 2018, which itself is a 35 U.S.C.§ 371 national stage application of PCT International Application No.PCT/GB2017/050577, filed on Mar. 3, 2017, which itself claims priorityfrom Great Britain Patent Application No. 1603822.6, filed on Mar. 4,2016, the contents of which are incorporated herein by reference intheir entireties. The above-referenced PCT International Application waspublished in the English language as International Publication No. WO2017/149320 A1 on Sep. 8, 2017.

FIELD OF THE INVENTION

The present invention relates to optical light communication andassociated data storage.

BACKGROUND OF THE INVENTION

The need to store large amounts of data has increased dramatically inrecent years. Often such data is stored in a network, for example,through data centre and cloud storage. However, the centralisation ofstored data presents new challenges to content providers and networkoperators. In particular, storing data at a central point results inover-utilising network infrastructure to send and receive data to andfrom the central point. In some circumstances, it is preferable to storedata as locally as possible relative to the end-user in order tominimize the load on network resources. This is known as network-edgestorage.

The need for network-edge storage is likely to increase significantlyover the coming years. One reason for this increase is the advent of theInternet of Things which will potentially see all devices having thecapability of sending and receiving data. These data can be stored anddistributed locally without the immediate need of being sent via theworld-wide-web. Another reason is an expected 70% compound annual growthrate on the demand for wireless communications. This demand, includingthe generation and consumption of content, will require unprecedentedgrowth with respect to network storage capabilities. Network-edgestorage allows data to be stored as close as possible to an end-user andallows frequently used content to be delivered more reliably and quicklyto the user. In addition, traffic that would normally traverse thenetwork backbone back to the central storage location is reduced.

Data can include sensitive/confidential (corporate or personalinformation and/or intellectual property) and so privacy and securityare paramount. Currently, the mass-market utilisation of radio frequencytechnology as the primary mechanism for wirelessly accessing this datahas inherent security risks. The pervasiveness of RF signals enables notonly eavesdropping of transmitted data, but also network breach andaccess to potentially confidential information stored on wirelesslyaccessible devices. This not only causes damages to individuals but alsointellectual property losses to content producers and providers alike.The protection of the data and its access is paramount.

SUMMARY OF THE INVENTION

According to one aspect of the present invention, there is provided anoptical communication access point comprising: an optical communicationchannel for allowing wireless light communication with a remote device,and a memory for storing content, wherein the content in the memory isaccessible by the remote device via the wireless light communicationlink.

By providing accessible memory locally in the optical communicationaccess point, there is provided a simple and secure means for storingcontent locally. For example, data can be stored and downloaded to theremote device using a conventional radio or fixed internet connectionand subsequently uploaded for storage on the light access point, so thatthe data can be accessed locally via the light access point in theabsence of an internet connection.

By light, it is meant electromagnetic waves with wavelengths in therange 1 nm to 2500 nm, and including ultraviolet, visible light andnear-infrared, and THz communication.

The optical communication access point may be adapted to allow theremote device to download content from the accessible memory and/orupload content to the accessible memory and/or delete content from theaccessible memory and/or move content in the accessible memory and/ormodify content in the accessible memory.

The access point may be adapted to allow the remote device to downloadcontent from the accessible memory.

The wireless communication link may be configured to provide abi-directional communication channel for sending data to and receivingdata from the remote device.

The memory may comprise general purpose memory and/or the content maymodifiable by the remote device.

The remote device may comprise a mobile device, for example at least oneof a mobile telephone, smartphone, laptop computer or other portablecomputing device.

The access point may be adapted to upload content to the accessiblememory from the remote device and download that content to at least oneother different remote device.

The optical communication access point may be adapted to allow onlyauthorised remote devices access to the memory.

The accessible memory may be segmented and different segments areaccessible by different remote devices or different groups of remotedevices.

The optical communication access point may be adapted to allow access tothe accessible memory only on receipt from the remote device of apassword and/or encryption key.

The content may include at least one of: written content, audio contentor video content.

The access point may be adapted to be connected to an external network,for example the internet.

According to another aspect of the invention, there is provided anoptical communication system comprising multiple optical access pointseach having an optical communication channel for allowing wireless lightcommunication with a remote device, and a memory for storing contentthat is accessible by the remote device via the wireless lightcommunication link, wherein the multiple optical access points areindependent of each other (un-networked), and content is transferrablebetween the access point memories via the remote device.

According to yet another aspect of the present invention, there isprovided an optical communication system comprising multiple opticalaccess points as claimed in any of the preceding claims, wherein thememories of the multiple optical access points are locally networked,thereby to provide distributed memory accessible by the remote device.

Content is downloadable from the distributed memory to the remote devicefrom any access point in the local network and/or content is uploadableto the distributed memory from the remote device from any access pointin the local network.

Content may be downloadable from the distributed memory to the remotedevice from any access point in the local network and/or content may beuploadable to the distributed memory from the remote device from anyaccess point in the local network.

The multiple optical access points may be connectable to an externalnetwork, for example the internet.

The multiple optical access points may provide distributed cloudstorage.

The system may be adapted to allow access to content in at least onememory based on location of the remote device.

The system may be adapted to allow access to the accessible memory onreceipt from the remote device of a password and/or encryption key,wherein the password and/or encryption key is distributed across two ormore of the accessible memories.

By networking the multiple optical access points and their storagedevices, there is provided a significant increase in the availablenetwork storage capacity. Furthermore, network edge capacity can beincreased with additional local nodes that are hosted by the users andconnected to the local network. Big data and distributed data storagecan also be provided by means of a dense network of local data storagedevices. Also, by providing a redundant or even distributed storagesystem, the volume of data storage is increased and security of the datacan be further improved.

The access point may be configured so that the content in the memory maychange dynamically, and/or may be uploaded by users. Isolation ofdifferent access points between rooms may be provided. Separate accesspoint within a room may be provided.

The access point memory may provide general purpose storage modifiableand accessible by a use without the need for special programmes orapplications. Reading and/or writing of data from and/or to the memory,and/or other data or content operations, may be performed using standardnetwork storage access/management tools.

Features in one aspect may be provided as features in any other aspectin any appropriate combination.

BRIEF DESCRIPTION OF THE DRAWINGS

Various aspects of the invention will now be described by way of exampleonly, and with reference to the accompanying drawings, of which:

FIG. 1 is a schematic diagram of an optical communication wirelessaccess point and a remote device;

FIG. 2 is a high level block diagram of a wireless access point;

FIG. 3 is a more detailed diagram of an optical communication wirelessaccess point;

FIG. 4 is a flowchart describing a procedure of accessing data;

FIG. 5 is a flowchart describing a procedure for modifying data;

FIG. 6 shows a schematic diagram of two optical communication wirelessaccess points and a remote device;

FIG. 7 is a flowchart showing a procedure for transferring data;

FIG. 8 is a block diagram of a network infrastructure;

FIG. 9 is a flowchart showing local cloud data flow;

FIG. 10 is a flowchart showing local cloud access using a pull and storemethod;

FIG. 11 is a flowchart showing local cloud access using a push and storemethod, and

FIG. 12 is a flowchart showing a method for cleaning a local cloud.

DETAILED DESCRIPTION OF THE DRAWINGS

The present invention provides a light enabled access system that useslights as access points. The access points allow highly localised accessto memory content. In some embodiments, as well as providing localiseddata storage, the access points are connected to a network and allowaccess to cloud based content. In all cases, the lighting must be Li-Fienabled, thereby to allow light based communications. Each opticalaccess point connects to one or more LED lighting fixtures to providepower and modulate the light to deliver data.

Each user has a remote device, typically a mobile device. Each remotedevice has a receiver for receiving light signals at a first wavelengthfrom the access points and a transmitter for transmitting at a secondwavelength to the access points. Each access point has a transmitter forsending visible light signals at the first wavelength to the remotedevice and a receiver for receiving at the second wavelength from theremote device. The remote device may be a desktop unit. For theavoidance of doubt, throughout this specification, “light” will refer tothose electromagnetic waves with wavelengths 1 nm to 2500 nm, and whichincludes the ultraviolet, visible light and near-infrared wavelengths.

FIG. 1 is a schematic diagram showing a wireless access point 32communicating with a remote device 34 using optical communication links.Remote device 34 is representative of a local user. An optical lightcommunication field can be emitted from an access point and these fieldscarry data in the form of optical communication signals. FIG. 1 shows asingle wireless access point 32 that emits a first optical communicationfield 36. A remote device 34 positioned in the optical communicationfield 36 can be linked to the wireless access point and receives asignal carried on the optical communication field 36. The remote devicemay also emit a second optical communication field 38 carrying data inthe form of a second light communication signal. When the remote device34 and access point 32 are positioned such that the wireless accesspoint 32 is in the second optical communication field 38 then thewireless access point can receive an optical communication signal sentby the remote device 34. In this way a bi-directional communicationchannel is created that enables the access point 32 to send data to andreceive data from the external device 34. This bi-directional channelwill be referred to as an optical communication link.

The single wireless access point 32 includes user accessible storagememory. The incorporation of storage memory into the access point isindependent of any applied network thereby allowing the access point toact as a standalone device. This device provides a securely wirelesslyaccessible electronic storage device that can be encrypted at variouslevels and can be partitioned for multiple storage areas. It alsoprovides highly localised access to content of interest to users.

FIG. 2 shows a high level block diagram of a wireless access point 10for use in the system of FIG. 1. In general, a wireless access point canbe broadly defined as having the following three components: a digitalplatform 12, an analogue electronics and front-end platform 14 and powerelectronics 16. The digital platform 12 hosts firmware and softwarenecessary for transmitting data to and receiving data from a wirelessnetwork. The digital platform comprises several components that operateat different levels of functionality that can be described withreference to the open systems interconnection model. The firmware andsoftware is capable of receiving and delivering data to and from thetransport layer. The digital platform 12 also controls the transfer ofdata between nodes on a single network which corresponds tofunctionality on the network layer. The digital platform 12 also mustcontrol the allocation of resources and data to users corresponding tofunctionality on the medium access control (MAC) layer. In addition, thedigital platform is capable of constructing physical signalscorresponding to the physical layer. The analogue electronics andfront-end platform 14 are utilised for the actual physical transmissionof optical communication signals. The power electronics 16 provide powerto the wireless access system.

FIGS. 3(a) and (b) show two embodiments of the wireless opticalcommunication access point digital platform 12 of FIG. 2. The embodimentof FIG. 3(a) is a standalone platform 12. The embodiment of FIG. 3(b)allows connection to an external network. Each has two interfaces: adigital interface 204 and an analogue interface 206. The embodiment ofFIG. 3(b) additionally has a network interface 202. A general purposeprocessor (GPP) 208 is connected to an accessible memory 210 via anaccessible memory connection 212. The general purpose processor 208 isalso connected to a random access memory (RAM) 214 and a system storage216. The digital interface 204 and the analogue interface 206 arebridged by a physical and media access control module 218. The physicaland media access control module is connected to a clock 220. Theaccessible memory 210 is an electronic physical storage device and couldbe for example, a flash memory, a solid state based memory or a harddisk. The accessible memory connection 212 may be, for example, aUniversal Serial Bus (USB), a general purpose input/output (GPIO), amultimedia connect (MMC), or a peripheral component interconnect express(PCIe).

The accessible memory connection 212 provides a primary connection tothe general purpose processor 208 allowing access to the accessiblememory 210 over an optical communication link. The accessible memory 210may be a memory chip that is capable of storing local and network data.Once access to the access point is granted, information stored on theaccessible memory can be accessed and functions such as upload,download, deletion and movement of data can be performed. Access to theaccessible memory can be password protected and/or encrypted and thuscontrolled. Data stored on the accessible memory can be encrypteditself. The physical and media access control module 218 are configuredto generate optical communication signals using the analogue interface206. Optical communication can include visible light communication. Thewireless access point is connected to an LED to produce the physicaloptical communication signal.

For the embodiment of FIG. 3(b) network layer functionality and theinterface 202 to the transport layer are hosted on the general purposeprocessor 208.

The accessible memory 210 can be partitioned to allow multiplesegregated storage spaces. Partitions of the accessible memory can beallocated to different users. A first user may be permitted access to afirst partition but not permitted access to a second partition.Different users may be permitted to use different partitions of thememory on the same wireless access point. For example, permission toaccess data on a first partition may be restricted to a local user andpermission to access data on a second partition may be restricted tonetwork use. In addition, data may have different permissions associatedwith an action requested. Actions include storing, accessing,downloading, uploading, moving, modifying and deleting. In addition,multiple accessible memory modules may be connected to the generalpurpose processor 208. Additional memory modules can provide increasedstorage space and can provide additional partitioning of stored data.Redundancy can also be ensured by storing the same data from a firstaccess point onto multiple access points.

FIG. 4 and FIG. 5 are flow diagrams of several techniques for a localuser to manipulate data on a standalone access point (e.g. theembodiment of FIG. 3(a)) by a local user.

FIG. 4 shows a schematic flowchart 400 of a procedure for accessing datain a file stored on an accessible memory integrated into the accesspoint 32. The single access point 32 has an accessible memory 210storing a file. The access point also has access to user permissioninformation that can either be stored on the wireless access point 32 orremotely. A user can refer to any device in the optical communicationfield of the access point 32, for example the remote device 34. Anauthorised user is a user that is authorised in accordance with thepermission information of the access point 32. Action permissioninformation associated with the file can be stored on the accessiblememory or remotely if network enabled. This information contains a setof permitted actions associated with the file. The permissions of agiven action may be dependent on the user requesting to carry out theaction. For example, each authorised user may have different access,read or download rights for a file.

The procedure 400 begins with an access attempt 401 sent to the accesspoint 32 by a user 34. At step 402, the access point 32 determineswhether or not the user 34 is authorised for access to the access point32. This determination is made using the user permission informationavailable to the access point 32. Following a successful authorisationof the user, the user 34 is now an authorised user. The authorised user34 makes a file access request 403. The file access request containsspecific details of the action requested by the authorised user 34. Thisrequest is examined at step 404 using the action permission informationassociated with the file. If it is determined that the authorised user34 is permitted to carry out the requested action on the file thenaccess to data stored on the wireless access point 32 is granted at step405 allowing successful completion of the data access procedure. If itis determined that the user is not authorised at step 402 or if anauthorised user is not permitted to carry out the request action at step404, then access to data on the access point 32 is denied 406 thusterminating the data access procedure of flowchart 400.

FIG. 5 shows a schematic flowchart 500 of a procedure for modifying datain a file stored on an access point accessible memory. As described withreference to FIG. 4, the single access point 32 has access to userpermission information. Action permission information associated withdata can be stored on the accessible memory or remotely. Thisinformation contains a set of permitted actions associated with storeddata. For example, different types of stored data may have differentpermission for each user. For example, a user may have write rights forsome file containing a certain type of data but not for other files, andfor the storage as a whole. In a further example, a user may bepermitted to upload to the access point but not to delete files storeson the access point.

The procedure 500 begins with an access attempt 501 sent to the accesspoint 32 by a user 34. At step 502, the access point 32 determineswhether or not the user 34 is authorised for access to the access point32. This determination is made using the user permission informationavailable to the access point 32. Following a successful authorisationof the user, the user 34 is now an authorised user. The authorised user34 makes a data modification request 503. The data modification requestcontains specific details of the data modification action requested bythe authorised user 34. This request is examined at step 504 using theaction permission information associated with the stored data. If it isdetermined that the authorised user 34 is permitted to carry out therequested action on the file then access to data stored on the wirelessaccess point 32 is granted at step 505 thereby allowing successfulcompletion of the data modification procedure. If it is determined thatthe user is not authorised at step 502 then access to wireless accesspoint 32 is denied 507 and the process is terminated. If an authoriseduser is not permitted to carry out the request modification at step 504,then the modification request is denied 508 and the process isterminated.

FIGS. 4 and 5 describe methods of modifying and accessing data by alocal user 34. However, such access and modifying methods are notlimited only to a local user. For example, the access point 32 may beconnected to a network, for example a local area network, that hostsadditional other devices to provide a data distribution network. In thissetup, storage in the accessible memory of the access point 32 can beaccessed or modified by either the local user or remotely via thenetwork. The accessible memory may also be partitioned into a partaccessible only to the local user and a part accessible only via thenetwork.

FIG. 6 is a schematic diagram of a first wireless access point 61, asecond wireless access point 62 and a remote device 63. Both thewireless access points 61 and 62 can communicate with the remote device.This arrangement allows the transfer of data between the first wirelessaccess point and the second access point, by means of the remote device63, which may download data from the access point, and then when theuser is in the vicinity of the second device, upload data to the secondaccess point. FIG. 6 shows the remote device 63 in the field of thefirst access point 61 and then moved into the field of the second accesspoint 62. In this way, the remote device can act as a conduit for datatransfer between two separate access points.

Although one-way data transfer is shown in FIG. 6, a firstbi-directional communication channel can be created between the firstaccess point 61 and the remote device 63 and a separate secondbi-directional communication channel can be created between the remotedevice 63 and the second access point. In other words, an indirectbi-directional optical communication link between two independent accesspoints can be created using a single remote device. Indirect links canallow distribution of data storage between non-networked access points,as data can be downloaded from the first access point 61 to the remotedevice 63 and when the user is in the vicinity of the second accesspoint the data can be uploaded.

FIG. 6 shows a bi-directional optical communication link created betweentwo access points 61 and 62 via a remote device 63. As both accesspoints 61 and 62 have the capability of sending and receiving opticalcommunication signals, a direct bi-directional optical communicationlink could alternatively be created between access points 61 and 62without using remote device 63. Indirect and direct opticalcommunication link can provide node to node communication as part of alarger mesh network involving more access points and remote devices. Aformed mesh network can be connected to an external network or operateindependently. By operating independently risk from a physical breach isremoved therefore increasing security and preventing data loss.Distributed storage algorithms can also be applied to increaseredundancy of available data. For example, maintenance files for a partcan be made available even if a single light needs to be replaced.Distributed security algorithms could also be used to increase securityof available data by ensuring that multiple events occur beforepermission is granted. As an example, a network of lights could beconfigured such that lights need to be visited in a particular sequenceto allow access to data.

FIG. 7 shows a flowchart 700 of a data transfer procedure that can bedescribed with reference to the system of FIG. 6. As described abovewith reference to FIGS. 4 and 5, each access point has access topermission information containing a set of permitted actions for a givenset of authorised users. For data transfer to be successful thefollowing two actions must be permitted for an authorised user: adownload stage from a first access point (AP1) 62 and an upload stagefor the second access point (AP2) 63.

The procedure of flowchart 700 begins with an access attempt made by theuser to access AP1 701. This corresponds to the beginning of thedownload stage. At step 702, the access point AP1 determines whether ornot the user 63 is authorised for access to AP1 by comparing the user 63using the user permission information available to the access point AP1.Following a successful authorisation of the user, the user 63 is now anauthorised user for AP1. The authorised user 63 makes a file downloadrequest 703. The file download request contains specific details of theaction requested by the authorised user 63. The download request isexamined at step 704 to assess whether the user is authorised for thedownload. This is done using the action permission informationassociated with the file to be downloaded. If it is determined that theauthorised user 63 is permitted to carry out the requested download ofthe file then permission to download the file stored on the wirelessaccess point AP1 is granted at step 705, thereby allowing successfulcompletion of the download stage of the data transfer procedure and thefile will then be downloaded to the device of the user 63. If it isdetermined that the user is not authorised at step 702 or if anauthorised user is not permitted to carry out the requested download atstep 704, then access to the access point AP1 is denied 706 thusterminating the data access procedure of flowchart 700.

A successful completion of the download stage of the data transferprocedure 700 is followed by the upload stage. The upload stagecommences with an access attempt made to the second access point AP2. Atstep 708, the access point AP2 determines whether or not the user 63 isauthorised for access to AP2 by comparing the user 63 using the userpermission information available to the access point AP2. Following asuccessful authorisation of the user, the user 63 is now an authoriseduser for AP2. The authorised user 63 makes a file upload request 709.The file upload request contains specific details of the actionrequested by the authorised user 63. The upload request is examined atstep 709 using the action permission information associated with thefile to be uploaded. If it is determined that the authorised user 63 ispermitted to carry out the requested upload of the file then permissionto upload the file to AP2 is granted at step 711 thereby allowingsuccessful completion of the upload stage of the data transfer procedureand the file will then be uploaded to AP2 from the device of the user 63thus completing the data transfer procedure. If it is determined thatthe user is not authorised at step 708 or if an authorised user is notpermitted to carry out the requested upload at step 710, then access tothe access point AP2 is denied 711 thus terminating the data accessprocedure of flowchart 700.

FIG. 8 shows an example of a network infrastructure in which multipleaccess points can be incorporated. As before, each access point haslocal, accessible memory/data storage. FIG. 8 shows linked access point801 and unlinked access points 802. Linked access point 801 is linked toexternal device 803 through an optical communication link. Unlinkedaccess points 802 are not linked to the external device 806. Remotedevice 803 can be linked to unlinked access point by moving the remotedevice into their projected optical communication fields. Linked accesspoint 801 and unlinked access points 802 are connected together on aninternal network 806. The internal network provides local cloud storage808, and is connected to a location-access server 812 and a server 814.The local cloud 808 is a database and storage device local to theinternal network. Although shown as a separate functional block, thelocal cloud 808 is distributed memory formed by the local memories ineach of the access points. This distributed memory is accessible via theoptical communication links and over the internal network 806.Optionally, if needed, further storage could be provided. An externalnetwork 810 may be provided (for example using the embodiment of FIG.3(b)). The external network 810 is a secondary network connected to theinternal network 806. The external network 810 can be the internet. Thelocation-access server hosts location access information associated withaccess points 801, 802 on the internal network 806. The file system 814can be stored on a server and is connected to the internal network.Typically, the file system 814 does not exist as a separate physicalentity, but instead is a logical entity with the infrastructuredistributed across some or all of the local access points. Content maybe stored on a linked access point 801, on any of the unlinked accesspoints 802 or the local cloud 808 or the external network 810.

FIG. 8 shows just one example of a network infrastructure. The accesspoints 801 and 802 have the capability of creating direct and indirectoptical communication links with other access points, which cansupplement existing network capabilities. The access points can act aslocal nodes connected to a larger network. In this way, a mesh networkcan be formed allowing big data and distributed storage processes.Increasing the number of local nodes to an existing network provides asignificant increase in available network storage capacity allowingdistributed storage over the network, and increased network edgecapacity. Additionally, a redundant or even distributed storage systemcan improve the security of the data stored on the network.

By networking the visible light access points, a user has access to alldata stored in the various access points. Modification of the storeddata can be affected from a single entry point. The distributed storageof data increases the resilience of the network and the data itselfproviding additional privacy and security on the available access pointmemory. The location, which can be uniquely leveraged by the lightmedium, can be used as part of the identification process to improve thenetwork access security and encryption of the stored data. Furthermore,the location of the visible light access point can be used as part of apolicy to determine user permissions and access data. Each light bulbcould be connected in a meshed network where no single device hosts allof the data. A specific combination of multiple lights being visited ina particular order may result in allowing access to specific data ordecrypting it.

Location relevant data can be stored on non-networked and networkedmulti-access point distributions. This could be location specific datathat may need to be updated and manipulated, but does not necessarilyneed to be connected to the network. An example could be the lights in aspecific location of an aircraft hangar where detailed information abouta specific part may be necessary but would only need to be used in thatone location and therefore all data pertaining to that part would bedynamically adjusted and digitally maintained on that specific (one orset-of) light.

To increase security and prevent data loss through simple physicalbreach, each of the lights in a specific location can be connected in ameshed network that is not connected to an external network (in thiscase the external network 810 would be either not connected or notused). Distributed storage algorithms could be used to increase theredundancy of the available data, i.e., ensure that the maintenancefiles for a part are available even if the single light where thatinformation is available needs to be replaced. Distributed securityalgorithms could be used to increase the security of the available databy ensuring that multiple events must occur before permission isgranted, e.g. accessing a particular sequence of lights via LiFi. Inanother embodiment, the external network 810, the location accessserver/controller 812 and the file system server 814 could be omitted.This would provide a simple network of access points connected via anEthernet cable and switch, thereby turning the lighting infrastructureinto a local cloud server.

FIG. 9 shows a flowchart 900 of a local cloud data flow procedure usingthe infrastructure of FIG. 8. A user 806 or an application on thenetwork makes an access point request 901 to the linked access point801. Following an access attempt, it is determined what the nature ofthe access attempt 901 is. Steps 902 and 903 determine whether or notthe request is to access content. In particular, step 902 determines ifthe request to access content is a request from a user 806 and step 903determines if the request is a request for content from a networkapplication. If the request is for content then the procedure proceedsto step 904 which involves determining whether the content request isavailable on the local cloud 808. If the content is available on thelocal cloud, access is granted 905 to local cloud. If the content is notavailable on the local cloud then access is granted 906 to the externalnetwork. Local cloud access 905 is described in further detail below inreference to FIGS. 10, 11 and 12.

The access request may not be a request to access content and mayinstead be a request to backup data. Step 907 involves determining if auser is requesting backup and step 908 involves determining if a networkapplication is requesting backup. If either a user or a networkapplication is requesting backup of data, then the procedure continuesto step 910. Step 908 determines if a user has downloaded content in agiven period and if so then the procedure continues to step 910. Step910 determines if there is sufficient space on the local cloud 810 inwhich to store a backup. If sufficient space exists then access isgranted 911 to the local cloud. If sufficient space does not exist onthe local cloud then access is granted to the external network 912.Following successful access the procedure is completed. If the accessattempt is not a request to access content or backup data or if contenthas not been downloaded in a given period 909 then access is denied 913.

Step 903 determines whether the access attempt was a request by anapplication on the network. If the request corresponds to either to auser content request or to a network application content request thenstep 904 follows. Step 904 determines whether or not the contentrequested is available on the local cloud. If the content requested isavailable on the local cloud, then an access request is granted 905 tothe local cloud 808. Access to local cloud is described in furtherdetail below with reference to FIGS. 10, 11 and 12. If it is determinedthat content is not available on the local cloud then access is granted906 to the external network.

FIG. 10 shows a flowchart 1000 that describes local cloud access infurther detail. Flowchart 1000 outlines the steps behind a pull andstore technique in reference to the equipment shown in FIG. 8. The pulland store technique is described with reference to a user request forcontent. Briefly, if content is not available on the local cloud 808then a request is made to an external network 810 for content to bestreamed. This content can then be pulled from the external network 810and stored on the local cloud 808 for subsequent access. The pull andstore method allows content to be made available locally to the user toreduce strain on network.

The pull and store method begins at step 1001 with an access attemptmade to linked access point 801. Step 1002 involves assessingcredentials of the user 806 and determining if these are allowable. Thisstep can take place on the access point 801. If the credentials are notallowable then access is denied 1003 at this first stage. If the usercredentials are allowable then step 1004 evaluates the location of therequest using the location-access information stored on thelocation-access server 812. This may correspond to the location of theaccess point 801. If the location of the request is determined to be notallowed then access is denied 1003. If the location of the request isallowed then the method proceeds to step 1005. In one example, specificdata may have location access information associate with it such that aspecific combination of multiple access points must be visited in aparticular order to allow access to specific data or decryption of thedata.

Following a successful location request, step 1005 determines if thecontent that is requested is available on the local cloud 808. If thecontent is available on the local cloud, then the content is streamed tothe device of the user 1006 thus completing the procedure. If content isnot available on the local cloud then a new request is made to requestcontent from the external network 1007. If the content providerauthorizes the request to access content then content is streamed to theuser device 1009. If the content provider does not authorize the requestthen access to the content is denied 1003.

Method 1000 continues with content being streamed from an externalnetwork 810 to the device of the user 806. This involves pulling contentfrom the external network 810. In order to reduce strain oninfrastructure between external network and device of the user themethod 1000 has further steps that allow content streamed from theexternal network 810 to be stored on the local cloud 808. Step 1010determines if there is sufficient space on the local cloud 808.Sufficient means enough space to store the content being streamed fromthe external network 810. If sufficient space exists then the content isstored on the local cloud. If sufficient space does not exist then thefurther step of cleaning the local cloud 1012 is completed before againdetermining whether or not sufficient space on the local cloud exists1013. The clean local cloud method 1012 is described in more detail withreference to FIG. 12. If there is still not sufficient space on thelocal cloud following the clean local cloud step, then the procedureends without content being stored on the local cloud 808.

FIG. 11 shows a flowchart 1100 describing local cloud access. Flowchart1100 describes a push and store method described with reference to theequipment of FIG. 8. The result of the method of FIG. 11 is contentbeing stored on the local cloud. In contrast to FIG. 10, the push andstore method is instigated by the network content provider with arequest to push content from the external network 810 to the local cloud808.

Step 1101 of flowchart 1100 is an access attempt by the network contentprovider made to access point 801. Step 1102 involves checking that thenetwork content provider credentials are allowable. If the networkcontent credentials are allowed then the method checks that the locationof the data request is allowable. This is verified using location datainformation found on the location-access server. Following allowablelocation verification the user must authorise the request by the networkcontent provider to access the access point at step 1104. If the userauthorizes the request then step 1105 establishes whether or not thereis sufficient space available on the local cloud. If sufficient space isavailable then the content is stored on the local cloud 1106. Should themethod fail at any of steps 1102, 1103, 1104 or 1105 then access isdenied 1107.

FIG. 12 shows a schematic flowchart 1200 describing a method of cleaningthe local cloud 808. Flowchart 1200 is a further description of step1012 and may incorporate step 1013 of flowchart 1000 and is thusdescribed with reference to FIG. 8. Step 1201 involves clearing contentdata that has previously been pushed to the local cloud from theexternal network, for example using the method described with referenceto FIG. 11. Step 1202 involves testing if there is sufficient space onthe local cloud 808. If there is not sufficient space on the local cloudthe method proceeds to step 1203. Step 1203 involves clearing downloadedcontent within a given period. Step 1204 involves testing if there issufficient space on the local cloud 808. If there is not sufficientspace on the local cloud the method proceeds to step 1205. Step 1205involves clearing network backup data. Step 1206 involves testing ifthere is sufficient space on the local cloud. If there is not sufficientspace on the local cloud the method proceeds to step 1207. Step 1207involves clearing user-backup data that is available on the externalnetwork 810. Step 1208 involves testing if there is sufficient space onthe local cloud 808. If there is not sufficient space on the local cloud808 the method proceeds to step 1209. Step 1209 involves a local cloudthat is full. In this case, no data can be cleaned and the methodterminates. If step 1202, 1204, 1206, or 1208 verifies that there issufficient space on local cloud, then the method ends and the cloud hasbeen sufficiently cleared.

Having local storage in an optical access point has numerousapplications and advantages. For example, the optical access point canbe used as a personal, local storage facility for device/user dependentfile access. Also, it enables highly localised broadcasting ofadvertising content, and distribution of information in general, e.g.,stored information transmitted from LED emergency signage. It alsoallows location-specific storage access. For example, lights in shopwindows, streetlamps, traffic lights, illuminated street furniture, etc.could broadcast information relevant to that specific location. In aclassroom environment, in the science room the local optical accesspoint(s) could hold science books, examples, exercises, etc. In amuseum, the local optical access point(s) could hold specificinformation relevant to the particular room. In the home environment,local optical access point(s) could be used to store recipes in thekitchen, whereas in the living room the optical access point(s) couldstore movies, etc. At a manufacturing site, the local optical accesspoint(s) could store drawings, 3d models, all information relevant tothe particular location, etc. Equally, the local optical access point(s)could be used as a place for people to leave messages/data.

Using light avoids interference and/or eavesdropping from neighbouringwireless systems for dedicated high-speed wireless access to therelevant storage. As another option, data storage devices could beaccessed underwater wirelessly (e.g., subsea data servers and datacentres). Information can also be stored in intrinsically-safeenvironments to enhance safety. In some embodiments, using multiplelights provides the opportunity for increased and distributed storage ina system, all of which can be accessed via an optical communicationlink. In some embodiments, the light access point is not connected to anexternal network and so the data that is hosted is only available in onelocation. This provides increased privacy and security of the data,thereby increasing the resilience.

A skilled person will appreciate that variations of the enclosedarrangement are possible without departing from the invention. Forexample, location relevant data can be stored on non-networked andnetworked access point distributions. In certain circumstances, thisdata may need to be updated and manipulated without necessarily having aconnection to an external network. For example, a set of one or morelights in a specific location of an aircraft hangar can store detailedinformation relating to a specific part that only needs to be used inthat one location. This information does not need to be shared over thenetwork as a whole but can be dynamically adjusted and manipulated onthat specific set of lights. Accordingly, the above description of thespecific embodiment is made by way of example only and not for thepurposes of limitation. It will be clear to the skilled person thatminor modifications may be made without significant changes to theoperation described.

1. An optical communication system comprising: an optical access pointdevice configured to provide access to content data, the optical accesspoint device comprising: a transmitter and a receiver configured torespectively transmit and receive optical wireless communication signalsover an optical wireless communication channel configured to provideoptical wireless communication with a remote device; an accessiblenon-temporary storage memory configured to store the content data,wherein the content data stored in the accessible non-temporary storagememory is accessible by the remote device via an optical wirelesscommunication channel; and a further optical access point deviceconfigured to provide access to further content data, the furtheroptical access point device comprising: a further transmitter and afurther receiver configured to respectively transmit and receive furtheroptical wireless communication signals over a further optical wirelesscommunication channel to provide further optical wireless communicationwith the remote device; and a further accessible non-temporary storagememory configured to store the further content data, wherein the opticalaccess point device is configured to download the content data from theaccessible non-temporary storage memory via the optical wirelesscommunication channel to the remote device in response to receiving anaccess request from the remote device, wherein the further opticalaccess point device is configured to upload the downloaded content datafrom the remote device, via the further optical wireless communicationchannel, and store the downloaded content data that was uploaded in thefurther accessible non-temporary storage memory, and wherein at leastone of the optical access point device that comprises the accessiblenon-temporary storage memory or the further optical access pointcomprising the further accessible non-temporary storage memory isconnected to one or more lighting fixtures.
 2. The optical communicationsystem of claim 1, wherein the optical access point device is configuredto receive the further content data from the further optical accesspoint via the remote device and to store the further content data in theaccessible non-temporary storage memory.
 3. The optical communicationsystem according to claim 1, wherein the remote device is configured totransfer the content data from the optical access point device to thefurther optical access point device, and to transfer the further contentdata from the further optical access point device to the optical accesspoint device, via the optical wireless communication channel and furtheroptical wireless communication channel, to provide distributed storageof the content data and further content data in the accessiblenon-temporary storage memory and the further accessible non-temporarystorage memory respectively for access to the content data or furthercontent data by the remote device and/or at least one other remotedevice.
 4. The optical communication system of claim 1, wherein theoptical access point device and further optical access point device areconfigured to allow the remote device or at least one other remotedevice to upload content data to the accessible non-temporary storagememory or further accessible non-temporary storage memory or todownload, to delete, move, and/or modify the content data from theaccessible non-temporary storage memory and/or the further content datafrom the further accessible non-temporary storage memory.
 5. The opticalcommunication system of claim 1, wherein the optical access point deviceand the further optical access point device are indirectly linked via aremote device.
 6. The optical communication system of claim 1, whereinthe optical access point device and the further optical access pointdevice are independent of each other and/or are un-networked.
 7. Theoptical communication system of claim 1, wherein at least one of theaccessible non-temporary storage memory or the further accessiblenon-temporary storage memory is a networked accessible non-temporarystorage memory, and wherein the content data or the further content datain the networked accessible non-temporary storage memory is accessibleto be moved, modified, or deleted by access to the content data or thefurther content data using a network associated with the opticalcommunication system.
 8. The optical communication system of claim 7,wherein the network is configured to be accessed by the remote deviceconnected by the optical wireless communication channel to a networkedoptical access point device.
 9. The optical communication system ofclaim 7, wherein at least one of the accessible non-temporary storagememory and the further accessible non-temporary storage memory arenetworked to provide a distributed memory that is accessible by theremote device or accessible to the network.
 10. The opticalcommunication system of claim 9, wherein the content data or the furthercontent data is downloadable from the distributed memory to the remotedevice from the optical access point device or the further opticalaccess point device in the network, and/or wherein the content data orthe further content data is uploadable to the distributed memory fromthe remote device from the optical access point device or the furtheroptical access point device in the network.
 11. The opticalcommunication system of claim 1, wherein at least one of the opticalaccess point device or the further optical access point device isconfigured to access the content data in at least one of the accessiblenon-temporary storage memory or the further accessible non-temporarystorage memory based on location of the remote device.
 12. The opticalcommunication system of claim 1, wherein at least one of the opticalaccess point device or the further optical access point device isconfigured to allow access to the accessible non-temporary storagememory, responsive to receipt from the remote device of a passwordand/or encryption key.
 13. The optical communication system of claim 1,wherein at least one of the optical access point device or the furtheroptical access point device is configured to allow only an authorizeduser or an authorized remote devices access to the accessiblenon-temporary storage memory or further accessible non-temporary storagememory.
 14. The optical communication system of claim 7, wherein thenetwork comprises at least one of a local network, a local area network,an internal network, a mesh network, or an external network.
 15. Theoptical communication system of claim 9, wherein a location of theoptical access point device or a location of the further optical accesspoint device is used as part of a policy to determine user or remotedevice permissions for access to the content data.
 16. The opticalcommunication system of claim 9, wherein at least one of the opticalaccess point device or the further optical access point device are partof a distributed cloud storage system.
 17. The optical communicationsystem of claim 9, wherein access to the distributed memory on thenetwork is determined by at least one of user credentials or networkcontent provider credentials.
 18. The optical communication system ofclaim 1, wherein the optical access point device or the further opticalaccess point device is configured for connection to an external networkand/or an internet, and wherein the optical wireless communicationchannel is configured to provide a bidirectional communication channelfor sending data to and receiving data from the remote device.
 19. Theoptical communication system of claim 1, wherein the content datacomprises at least one of visual content, written content, audiocontent, or video content.
 20. The optical communication system of claim1, wherein the accessible storage non-temporary memory comprises atleast one of a flash memory, a solid state based memory or a hard disk,and wherein the optical access point device further comprises arandom-access memory.
 21. The optical communication system of claim 1,wherein the optical wireless communication signals transmitted and/orreceived over the optical wireless communication channel are atwavelength(s) in a range 1 nm to 2500 nm.
 22. The optical communicationsystem of claim 1, wherein the remote device comprises a mobile device.23. The optical communication system of claim 1, wherein the accessiblenon-temporary storage memory is configured to provide network edgestorage.
 24. A method of providing storage of data, the methodcomprising: providing, by an optical access point device, access tocontent data stored in an accessible non-temporary storage memory thatis accessible by a remote device via an optical wireless communicationchannel; transmitting and/or receiving optical wireless communicationsignals over the optical wireless communication channel configured toprovide optical wireless communication with a remote device; providing,by a further optical access point device, access to further content datastored in a further accessible non-temporary storage memory via afurther optical wireless communication channel; and transmitting and/orreceiving further optical wireless communication signals over thefurther optical wireless communication channel configured to providefurther optical wireless communication with the remote device, whereinthe optical access point device is configured to download the contentdata from the accessible non-temporary storage memory via the opticalwireless communication channel to the remote device in response toreceiving an access request from the remote device, wherein the furtheroptical access point device is configured to upload the downloadedcontent data from the remote device, via the further optical wirelesscommunication channel, and store the downloaded content data that wasuploaded in the further accessible non-temporary storage memory, andwherein at least one of the optical access point device that comprisesthe accessible non-temporary storage memory or the further opticalaccess point comprising the further accessible non-temporary storagememory is connected to one or more lighting fixtures.